home

Examen_Word_2010v2.0.2.exe

SECDMSO2010

ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Publisher:
Grupo DILSA de San Luis, S.C.  (signed by ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV)

Product:
SECDMSO2010

Description:
Desarrollado por EDUIT LATAM S.A. de C.V.

Version:
2.00.0002

MD5:
fb7b29b47ddb518007e6c2bc7deead02

SHA-1:
fde1622f4370de014efe3f5aca89d2e9abed4152

SHA-256:
080d72ec37f2ab741f8c0fade417bb5abd127ba103c737b1fc2fd99f3bd1ea92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 11:23:56 AM UTC  (today)

File size:
6.7 MB (6,991,072 bytes)

Product version:
2.00.0002

Copyright:
Grupo DILSA de San Luis, S.C.

Trademarks:
Grupo DILSA de San Luis, S.C.

Original file name:
Examen_Word_2010v2.0.2.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\downloads\examen_word_2010v2.0.2.exe

Digital Signature
Signed by:
ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Authority:
GoDaddy.com, Inc.

Valid from:
4/17/2012 4:11:53 PM

Valid to:
4/17/2015 4:11:53 PM

Subject:
CN=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, OU=INVESTIGACIÓN Y DESARROLLO, O=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, L=PUEBLA, S=PUEBLA, C=MX

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2AFCEDDA2962BB

File PE Metadata
Compilation timestamp:
9/21/2013 12:13:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:/gWOFDL6w//McOksZmu7jn1zvk8AZmnM1zbASsNDfiZlm0Qiip:XgDL6OEzRp7jn1zvkPl1zb7sNDiWpiip

Entry address:
0x4F1C

Entry point:
68, C4, DD, 42, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, A4, 76, B0, 9B, D5, 90, 12, 4E, 9C, 02, 10, 83, A9, FE, 26, AF, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 45, 78, 61, 6D, 65, 6E, 5F, 57, 6F, 72, 64, 5F, 32, 30, 31, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 05, A4, 5D, 3D, 99, 65, 1A, CA, 4F, 85, C5, 66, 17, C6, 7A, 1F, 31, 1D, 06, FB, 4C, CC, 6C, B4, 43, 8C, 5D, E0, E5, B6, 9F, 68, 73, 3A, 4F, AD...
 
[+]

Entropy:
6.6975

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
2.4 MB (2,543,616 bytes)

The file Examen_Word_2010v2.0.2.exe has been seen being distributed by the following URL.

https://jasn75.gnomio.com/mod/.../view.php?id=113

Scan Examen_Word_2010v2.0.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.